3 ms·

Mosh is nice, but I always feel wary about opening a big port range for it. Had it on my todo list for ages to work out a way of temporarily opening the port ra

• falcolas 12y ago
  FWIW, it works well with a fairly typical "allow all out, deny all in" firewall configuration. That is what I have set up on my server, and it works fine. If you go the deny all out, yeah, you'll probably have to set up more specific outgoing exceptions for Mosh.
  • blueskin_ 12y ago
    That's surprising, as IIRC it needs inbound UDP on high ports which aren't directly associated with the inbound TCP for the SSH session.
    • falcolas 12y ago
      It does; they are likely opened up via hole punching, coordinated via the SSH connection.
      • blueskin_ 12y ago
        Gets stuck at "Connecting..." when I try it on any of my servers with the default firewall config (allow all out, allow related/established in, allow new to 22).
• jamies888888 12y ago
  You can open a single UDP port and specify the port number using the -p option when connecting.
• ryanlol 12y ago
  If you're worried about opening ports, you're doing security wrong.
  • blueskin_ 12y ago
    Very funn- ...oh, you're serious? /facedesk
• deleted 12y ago
  [deleted]